HO
Product
hoppscotch
17
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 5Low 0
Watch
Add hoppscotch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30825 | 6.5 | Mar 7 | hoppscotch: IDOR - Any authenticated user can revoke any other user's Personal Access Token Affected: < 2026.2.1 |
| CVE-2026-28217 | 6.5 | Feb 26 | IDOR in GraphQL userCollection Query Exposes Other Users' Private Collections Affected: < 2026.2.0 |
| CVE-2026-34847 | 6.1 | Apr 2 | hoppscotch: Open redirect via `/enter?redirect=` Affected: < 2026.3.0 |
| CVE-2026-34848 | 5.4 | Apr 2 | hoppscotch: Stored XSS in team member overflow tooltip via display name Affected: < 2026.3.0 |
| CVE-2024-27092 | 5.4 | Feb 26 | Content spoofing - real Hoppscotch emails Affected: < 2023.12.6 |
Showing 5